From b475643c112f49701db2fb3d1493987888c97c8a Mon Sep 17 00:00:00 2001
From: James Kirsch <generalfuzz@gmail.com>
Date: Thu, 19 Mar 2020 14:25:07 -0700
Subject: Add support for encrypting backend Keystone HAProxy traffic

This patch introduces an optional backend encryption for Keystone
service. When used in conjunction with enabling TLS for service API
endpoints, network communcation will be encrypted end to end, from
client through HAProxy to the Keystone service.

Change-Id: I6351147ddaff8b2ae629179a9bc3bae2ebac9519
Partially-Implements: blueprint add-ssl-internal-network
---
 ansible/certificates.yml | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'ansible/certificates.yml')

diff --git a/ansible/certificates.yml b/ansible/certificates.yml
index f8021fcfc..4b6d2528d 100644
--- a/ansible/certificates.yml
+++ b/ansible/certificates.yml
@@ -1,4 +1,7 @@
 ---
+- import_playbook: gather-facts.yml
+  when: kolla_enable_tls_backend | default(false) | bool
+
 - name: Apply role certificates
   hosts: localhost
   roles:
-- 
cgit v1.2.3